Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
File: SOmaP-7GTWutCY0bLfC1NqA4jqM.mft (raw, json)
Hash identifier: Bv755C5w/geoQUmxhMIn88vYIghqWhmbz7oypgQfBBU=
Subject key identifier: EF:08:F6:EC:4A:94:D4:44:61:55:E5:2B:74:43:63:9C:67:A5:15:68
Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
Certificate issuer: /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Certificate serial: 019D28F2D0946C9F118FD987689C2026AA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:01:34 +0000
Manifest this update: Thu 26 Mar 2026 07:01:34 +0000
Manifest next update: Fri 27 Mar 2026 07:01:34 +0000
Files and hashes: 1: SOmaP-7GTWutCY0bLfC1NqA4jqM.crl (hash: XT2Tdtzl1tFDWxAtAhbC7kYX1nSsSqGGl73zh8YnYto=)
2: ZKJ7OMsZ-2L7gwZt-ahGl36GQCk.roa (hash: dn5pl0tJHil7i7MEL6Urv0uyJj/BFkAQ/mpD5JtEACA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:d0:94:6c:9f:11:8f:d9:87:68:9c:20:26:aa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Validity
Not Before: Mar 26 07:01:34 2026 GMT
Not After : Mar 27 07:01:34 2026 GMT
Subject: CN=ef08f6ec4a94d4446155e52b7443639c67a51568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:34:8a:42:a8:74:bd:76:fe:ad:05:09:6c:d6:
e8:cb:93:34:c2:fd:db:f9:6f:1c:c2:08:01:b1:e9:
82:5e:c0:e4:b6:0c:36:73:bc:35:a4:46:13:49:2d:
77:05:00:04:15:40:a2:6b:60:7e:e7:ca:d9:73:5e:
b9:cd:d3:3e:41:84:7a:25:a1:d2:57:2b:bc:f4:4e:
ea:dc:c8:1c:a4:42:13:6e:11:f2:db:de:b6:37:d1:
72:d4:3d:31:a7:3e:7b:aa:94:bf:91:b1:93:80:95:
db:23:38:af:b3:d0:4c:b5:b2:3e:79:bc:e0:85:b1:
8a:a0:89:0e:bb:f6:4e:94:ec:09:7a:0d:49:df:8f:
5f:1a:77:b9:73:27:3d:9f:ba:ec:74:6b:36:f2:0d:
36:2c:ad:cc:18:09:ff:60:5a:3c:24:7e:4b:a8:0a:
20:c3:48:56:42:b7:28:e3:f9:25:46:0a:9c:d5:63:
94:7b:40:1d:60:13:77:a3:34:64:6c:c2:6d:48:a9:
f7:17:28:8f:dc:79:3c:a9:05:15:80:c7:fc:f7:8a:
6b:4a:31:a3:b7:25:4b:0e:c2:28:b1:14:0e:9d:2c:
8b:eb:b4:57:36:2c:fd:67:e2:3c:5a:ec:0e:b4:79:
95:28:6f:13:c6:4f:8c:06:92:59:50:8e:80:71:88:
80:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:08:F6:EC:4A:94:D4:44:61:55:E5:2B:74:43:63:9C:67:A5:15:68
X509v3 Authority Key Identifier:
keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:02:26:ee:59:d0:02:ca:a2:5b:e8:61:a8:1f:ad:f9:46:67:
e2:ed:4b:c8:26:63:91:db:5c:90:e4:91:7d:73:11:0c:2b:2c:
80:87:78:a1:03:22:71:cb:4f:a0:e6:fc:da:a9:35:04:ee:7a:
2c:7e:b3:8e:ce:59:cd:34:07:82:dc:56:f9:a7:be:5f:b6:08:
f9:54:a4:bd:92:d0:c1:f6:e5:e5:87:99:ec:2c:91:48:40:a5:
47:7a:64:02:d8:86:07:d9:6f:7f:9a:0c:f4:36:4e:e6:29:4c:
07:11:b0:e7:3b:0a:bd:95:10:68:9e:68:42:31:08:fe:60:6e:
6c:9d:dd:8c:65:db:1b:d4:9d:3b:34:08:30:a9:2a:ff:f3:3e:
ea:c5:ad:c3:dc:b8:d1:e7:ed:82:03:74:dd:78:6d:78:7f:63:
47:45:05:06:f5:87:32:7a:7b:f2:03:4e:5e:18:be:d0:33:12:
bf:35:90:b9:26:56:af:48:ca:da:6a:21:19:1d:8b:24:e3:19:
91:3d:9d:d0:ab:cf:04:4b:f6:21:72:fd:03:a7:48:7f:0c:e1:
af:f0:4d:1a:61:17:ee:96:77:5c:14:b8:1d:6a:1a:1c:94:0c:
9b:87:ec:6a:0f:5d:ca:97:85:86:25:04:c0:20:9c:d3:68:48:
fb:e5:ae:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:30 2026 by rpki-client